SATELLITE 6 OVERVIEW AND ROADMAP. Michael Lessard Senior Solutions Architect michaellessard

Transcription

1 SATELLITE 6 OVERVIEW AND ROADMAP Michael Lessard Senior Solutions Architect mlessard@redhat.com michaellessard

2 What is Satellite? 2

3 LIFECYCLE MANAGEMENT PHYSICAL 3 VIRTUAL PRIVATE CLOUD PUBLIC CLOUD

4 EFFICIENT SYSTEMS MANAGEMENT Provides life-cycle management for Red Hat infrastructure Enables provisioning on bare metal, virtualized and cloud-based infrastructures Provides centralized configuration and drift management Simplifies management of content, including security errata and containers Makes it easy to manage and track subscriptions Allows large scale remote command and control for managed hosts 4

5 SATELLITE COMPONENTS **6.3+ 5

6 SOFTWARE/CONTENT MANAGEMENT Define & manage Standard Operating Environments Quickly respond to security vulnerabilities (Heartbleed/ShellShock) Comply with your organization's security policies (Openscap) Deploy all Red Hat Infrastructure as well as third-party software 6

7 LIFECYCLE MANAGEMENT 7

8 ACCESS INSIGHTS 8

9 SOFTWARE/CONTENT MANAGEMENT :: DEMONSTRATION #1 Dashboard/Red Hat Content/Errata/Insights 9

10 CONFIGURATION MANAGEMENT Define desired state of systems Manage and remediate drift Audit & report when changes are made Use remote commands on many systems (6.1.5) 10

11 CONFIGURATION MANAGEMENT :: DEMONSTRATION #2 Puppet/Remote execution 11

12 PROVISIONING Provision to bare metal, virtual (VMware, libvirt, RHEV), private (Openstack, Docker), and public clouds(openstack, Amazon, Rackspace and Google) Support build-based and image-based deployments Discover non-provisioned hosts 12

13 PROVISIONNING :: DEMONSTRATION #3 Provisioning/Compute Resources/Discovered hosts 13

14 SUBSCRIPTION MANAGEMENT Centrally manage subscription usage Maintain accurate inventory and utilization information Report on subscription consumption on a group-by-group basis 6.2.2: Improved bulk management of subscriptions ( 14

15 SATELLITE 6 PRODUCTS SATELLITE SERVER SATELLITE CAPSULE SERVER (evolution of Satellite Proxy) Multi-tenant On-premise repository management User and group role-based access control (RBAC) Powerful user interfaces (GUI, API & CLI) Advanced subscription management 15 Federated services Automated provisioning Discovery of new physical & virtual machines

16 SATELLITE

17 RELEASE THEMES 6.0 THEMES - a more modern Satellite 5 New content workflow Products/Repositories, Content Views New Life Cycle workflow Environments and life cycle paths Recipe-based configuration management (Puppet) Smartly build Classes of systems with a new pluggable framework (The Foreman) REST-based APIs 6.1 THEMES - satellite 5 gap closure / scaling and polish / MaaS UI cleanup and unified content (e.g. RPMs and Config managed together) Disconnected Satellite Support Improved federation and scale OpenSCAP integration (policy and compliance) Network configuration Discovery and Deployment Metal-as-a-Service Red Hat Insights integration

18 SATELLITE 6.2 AT A GLANCE AUTOMATED WORKFLOWS Remote execution Scheduling Expanded bootstrap and provisioning options 18 AIR-GAPPED SECURITY & FEDERATION SOFTWARE MANAGEMENT IMPROVEMENTS CAPSULE IMPROVEMENTS ATOMIC OSTREE AND CONTAINERS ENHANCED DOCUMENTATION Inter-Satellite Sync for fully connected and disconnected Satellites Streamlined content synchronization* Simplified Puppet smart variable management Arbitrary File based repositories Deeper insights into Capsule health and overall performance Lighter-weight Capsules Highly available Capsule Complete management of RHEL Atomic hosts Mirror container repositories New Documentation Guides Available More user-friendly documentation

19 AUTOMATED WORKFLOWS Remote Execution AUTOMATED WORKFLOWS Automate workflows and enable users to take multiple actions against groups of systems Create a library of job templates, allowing easy & secure reuse of common commands Scheduling Remote execution Scheduling Expanded bootstrap & provisioning options Remote Execution jobs such as patch installation, remote commands or puppet runs can be scheduled to run immediately, at some future time, or on a recurring basis Expanded Bootstrap & Provisioning Options Simplify the process of migrating and registering systems to Satellite via an automated script Allow end users to more efficiently provision systems in secured environments where DHCP and PXE may not be available

20 AIR-GAPPED SECURITY & FEDERATION Inter-Satellite Sync AIR-GAPPED SECURITY & FEDERATION Inter-Satellite Sync Synchronize and export content from one Satellite to another, especially useful for Satellites running in air-gapped environments Allows export (full or incremental) of a repository, content view or a repository within a content view Exported content can be used by another Satellite as their upstream source of content (CDN)

21 SOFTWARE MANAGEMENT IMPROVEMENTS Streamlined content synchronization (Lazzy sync 6.2.3) SOFTWARE MANAGEMENT IMPROVEMENTS Streamlined content synchronization* Simplified Puppet smart variable management Build systems almost immediately after install Speeds backup and restore process because software packages are no longer required to be backed up Drastically reduces the amount of time a Satellite needs to be offline for backup Simplified Puppet Smart Variable Management Improved UI/UX for Smart Variable Management making configuration management simpler and less error prone

22 CAPSULE IMPROVEMENTS Deeper insights into Capsule health and overall performance CAPSULE IMPROVEMENTS Improved Capsule visibility, such as what services are running and their status, from the centralized Satellite console Lighter-weight Capsules Deeper insights into Capsule health and overall performance Lighter-weight Capsules Highly available Capsule Red Hat Satellite Capsule Server can be configured to store only the content that has been requested by its clients, reducing the storage needed by the Satellite Capsule Server Highly available Capsule New Reference Architecture including deploying a Highly Available Satellite Capsule

23 ATOMIC HOSTS AND CONTAINERS Complete management of RHEL Atomic hosts ATOMIC HOSTS AND CONTAINERS Mirror, provision and manage RHEL Atomic hosts and content Satellite treats RHEL Atomic as a compute resource Satellite can be configured to deploy containers on a RHEL Atomic host Complete management of RHEL Atomic hosts Mirror container repositories Mirror container repositories Satellite supports mirroring container repositories such as the Red Hat Registry, DockerHub and other 3rd-party sources Provides a secure & curated point of entry for container content

24 ENHANCED DOCUMENTATION New Documentation Guides Available ENHANCED DOCUMENTATION New Documentation Guides Available More User-Friendly documentation Architecture Guide. (How to plan your Satellite 6 deployment) Virtual Instance Guide (How to configure virt-who) Hammer CLI Guide (How to use Satellite s CLI) Content Management Guide (How to easily manage Satellite s content ) Quickstart Guide (How to get up and running quickly) More User-Friendly documentation User Guide split to make more topical and easier to follow: Server Administration Guide Host Configuration Guide Cheat Sheets available for specific topics (Hammer) Updated Feature Overviews

25 NEW TOOL - Satellite-Clone February 3rd 2017 How to clone your Satellite 6 Satellite-clone contains simple Ansible playbooks that can be used to perform any of the following tasks: Setup Satellite 6.1 or 6.2 install with the Satellite backup data Change the hostname on an existing Satellite install Perform a minor upgrade of an existing Satellite This tool is not supported for production environments and is intended to be used for development/testing purposes

26 Red Hat Satellite blog

27 LOOKING TOWARDS THE FUTURE *** Subject to change!!! *** 27

28 SATELLITE RELEASE TIMING. Regular cadence for z-stream releases to improve predictability Asynchronous releases (6.2.z) every ~30 days High-impact security fixes High-impact bug fixes More frequent major releases to improve predictability Goal is 6-month cadence Releases will be smaller, but more predictable More alignment to upstream releases in order to reduce inconsistencies 28 INTERNAL ONLY - CONFIDENTIAL

29 6.3 THEMES - polish, updated tooling, easier to support, integrations Updated Tooling Organizational Management Troubleshooting and Supportability Polish and rounding-out features Management Integrations Client platform support expansion Puppet 4 and Puppet 3.8 You choose Hammer CLI and API Call: Listing & Download of Content from Content View Hammer CLI and API Call: List all hosts for errata Org-Admin role formalized Logging improvements Hot Backups Container content-flow cleanup UEFI support Infoblox support Ansible and Ansible Tower Automation and configuration Openshift Prod-Ops/Dev-Ops (Satellite / Openshift) improved coordination Azure Cloud Clients

30 THANK YOU plus.google.com/+redhat facebook.com/redhatinc linkedin.com/company/red-hat twitter.com/redhatnews youtube.com/user/redhatvideos